Cookie Policy

Please, read the following Cookie Policy document of VisitMilano.

Table of contents

The cookies and other tracking tools used by this website may be classified into the following broad categories:

  1. Technical cookies, necessary for the functioning of the website;
  2. Profiling cookies, used to track and analyze the behavior and habits of the user (the “User”), in order to provide services tailored to the User’s preferences.

Further details are provided below.

1) Technical Cookies (including other technical identifiers) – Consent Not Required

Technical cookies and other technical identifiers are used for the sole purpose of enabling the transmission of a communication over an electronic communications network or of providing an IT service expressly requested by the User. This category includes cookies serving the following purposes:

  • Browsing or session cookies: ensure normal navigation and use of the website (for example, allowing the User to view a service, make a purchase, or log in to access restricted areas);
  • Anonymized analytics cookies: used exclusively to collect information in aggregate form, not attributable to an individual User, for the purpose of compiling statistics on the service and on website usage. These cookies may also be provided by third parties; in such cases, the Controller has anonymized them (by masking at least the fourth component of the IP address), and the third party refrains from combining analytics cookies with other processing or from disclosing them to additional third parties;
  • Functionality cookies: allow navigation according to a set of selected criteria (e.g., language, products chosen for purchase) in order to improve the quality of the service provided.

The legal basis for processing technical cookies lies in the performance of a contract or pre‑contractual measures (Article 6(b) GDPR), as they are necessary to make the website and the requested service usable by Users. The use of such cookies does not require consent.

Necessity of Data Provision and Consequences The provision of data collected through the above cookies is not mandatory; however, it is necessary for connection to the website and for the provision of the service. In the absence, in whole or in part, of such provision, the website may not be usable, or its use may be impaired.

The list of technical cookies used by this website, together with their characteristics (e.g., features, data retention periods, etc.), is available in the dedicated cookie area accessible via the banner (link provided at the bottom of this notice).

Profiling Cookies and Other Tracking Tools – Consent Required

Profiling cookies and other tracking tools allow the monitoring and tracing, through automated means, of the User’s behavior during internet browsing.

Their purpose is to associate specific actions or recurring behavioral patterns in the use of the offered functionalities with identified or identifiable subjects, in order to group different profiles into homogeneous clusters of varying size. This enables the Controller or third parties, among other things, to tailor the provision of services in an increasingly personalized manner beyond what is strictly necessary for service delivery, as well as to send targeted advertising messages.

Profiling cookies and other non‑technical tracking tools may be:

  • First‑party cookies: installed directly by the Controller on its own website;
  • Third‑party cookies: installed on the Controller’s website by a third party. The Controller has no control over the activities and purposes of such third parties, nor over the possibility that they may change them over time. In this respect, the Controller acts solely as an intermediary and refers the User to the third party’s privacy notice, accessible via the link provided alongside each cookie listed in the dedicated cookie area accessible via the banner or at the bottom of this notice.

Non‑anonymized analytics cookies used by third parties also qualify as profiling cookies, where the Controller has not anonymized them (by masking at least the fourth component of the IP address) and the third party combines analytics cookies with other processing (e.g., customer files or statistics of visits to other websites) or discloses them to additional third parties.

The use of profiling cookies (including non‑anonymized analytics) is subject to the User’s consent, which constitutes the legal basis for the processing of data collected through such cookies, in accordance with Article 6(a) GDPR. Consent may be granted or withdrawn at any time by accessing the dedicated cookie area via the banner or the link provided at the bottom of this notice.

Necessity of Data Provision and Consequences Failure to provide data due to the absence of consent for such cookies has no consequences for website navigation or use. However, it prevents the possibility of offering advertising messages relating to services and goods aligned with the User’s preferences and actual interests expressed during online browsing.

Upon the first access to any page of the website, a banner is displayed containing a brief notice and a link to the Cookie Consent Manager, through which the User may easily select which cookies to install. The User may access the Cookie Consent Manager at any time via the specific link in the website footer.

In addition, cookie settings may also be modified through the browser in use, by deleting all or some cookies or by restricting their transmission to certain websites. Instructions for modifying cookie settings for the most commonly used browsers are available at the following links:

  • Google Chrome
  • Mozilla Firefox
  • Microsoft Edge
  • Safari

Disabling or deleting cookies may compromise the optimal use of certain areas of the website or prevent certain functionalities, and may also affect the operation of third‑party services.

Communication and Disclosure of Data

The data collected through the use of cookies may be processed by employees and collaborators of the Controller who are entrusted with pursuing the purposes indicated above, expressly authorized to process such data, and duly instructed in operational procedures. Such data may also be processed by trusted companies performing technical and organizational tasks on behalf of the Controller. These companies act as Data Processors. In particular, with regard to data processing carried out through the Website, the company responsible for hosting and backing up the Website’s data has been appointed as Data Processor. Data may also be processed by external entities acting as independent Data Controllers, such as supervisory and regulatory authorities.

Personal data may be transferred outside the European Union (e.g., to the United States). In such cases, the transfer will take place in accordance with the provisions of Chapter V, Articles 44 et seq. of the GDPR. Specifically, transfers may occur to third countries deemed adequate under Article 45 GDPR pursuant to a decision of the European Commission, or, in the absence of an adequacy decision, on the basis of Standard Contractual Clauses under Article 46 GDPR, provided that the third country ensures an adequate level of protection of personal data.

Data Retention

The retention period for data collected through cookies and other tracking tools is specified in the lists of cookies used by this Website, available at the bottom of this notice.

Who Can Access Your Data?

The data collected through cookies may be accessed by collaborators authorized by the Controller, such as personnel responsible for website maintenance and management, marketing, and administration. Data may also be accessed by third parties (e.g., service providers, IT infrastructure providers, and similar entities involved in the management and supervision of the Website) acting on behalf of the Controller and duly appointed as Data Processors pursuant to Article 28 GDPR. With your consent, data may also be used by third parties that install their own cookies on the Controller’s Website.

Your Rights as a Data Subject

By contacting the Privacy Office at info@costacommunication.com, you may request from the Controller access to your personal data, their erasure, or restriction of processing in the cases provided for under Article 18 GDPR, as well as object to processing in cases of legitimate interest of the Controller.

Where processing is based on consent or on a contract and is carried out by automated means, you have the right to receive your data in a structured, commonly used, and machine‑readable format, and, where technically feasible, to transmit them to another controller without hindrance. You also have the right to withdraw consent for non‑essential cookies at any time, without affecting the functioning or usability of the Website.

Finally, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) if you believe that the processing of your data is in breach of applicable law, or to seek judicial remedy.

Data Controller

The Data Controller is Mario Porchera, who can be contacted at the registered office located at Via Savona, 118, 20144 – Milan (MI), or by email at info@costacommunication.com.

Data Security

Personal data will be processed using appropriate technical and organizational security measures, proportionate to the nature of the data, in order to ensure their integrity and confidentiality, and to protect them against risks of unlawful intrusion, loss, alteration, or disclosure to unauthorized third parties.

Updates

The Controller reserves the right to amend and update this notice at any time. Changes will apply from the time of their communication or publication. You are therefore advised to regularly review the current version of this Privacy Notice.